Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c965d6b4-d6f7-394a-be55-5a3f58ca178d.roa
File:                     c965d6b4-d6f7-394a-be55-5a3f58ca178d.roa (raw, json)
Hash identifier:          a0s3tZkXZkIdLM1XDDWKqSk+pUdZDzIS/rykbJI+ezA=
Subject key identifier:   95:44:49:03:96:E2:9F:A9:91:A8:B1:E3:97:13:08:71:AB:CA:21:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A51FFA6D5F469B69A6C20B5B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c965d6b4-d6f7-394a-be55-5a3f58ca178d.roa
Signing time:             Thu 26 Jun 2025 14:36:21 +0000
ROA not before:           Thu 26 Jun 2025 14:36:21 +0000
ROA not after:            Wed 24 Sep 2025 14:36:21 +0000
asID:                     36616
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:ff:a6:d5:f4:69:b6:9a:6c:20:b5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 14:36:21 2025 GMT
            Not After : Sep 24 14:36:21 2025 GMT
        Subject: CN=62e10bbd-103f-4116-92d6-083f0c6a36f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:68:10:33:6d:33:31:70:2e:72:dd:5b:51:
                    29:9b:87:d9:93:5c:48:de:aa:88:3d:75:f7:d9:38:
                    36:2d:ed:89:6c:64:68:90:f9:55:1b:6a:fd:fe:b4:
                    18:eb:fe:9e:79:dc:00:f9:b9:dd:6e:db:4a:3e:eb:
                    e8:22:1a:43:66:ef:af:55:fb:9c:4e:e0:7c:b4:22:
                    19:8b:b9:9a:01:ea:eb:90:0e:d2:8c:17:46:47:a2:
                    e6:a6:5c:a4:fc:b5:16:8f:cd:9e:34:d4:82:a0:a4:
                    89:fb:8d:ea:30:8e:42:64:27:01:e7:92:55:d0:a7:
                    31:0d:36:d5:e9:24:bf:20:34:5f:28:af:bc:66:62:
                    f2:99:41:27:35:2c:88:15:c7:09:be:a6:6c:85:60:
                    2b:e1:b3:89:6c:98:28:21:f0:cc:df:12:ce:3c:ba:
                    1f:14:09:ae:0e:41:5a:70:6f:08:aa:34:49:d8:1f:
                    be:6d:f6:cd:83:9c:dc:a1:b4:f1:04:5d:d4:ea:07:
                    22:99:cf:76:95:cc:ca:b5:18:a4:e2:c4:ca:83:d8:
                    ba:cd:76:dc:02:07:3a:05:be:da:51:39:01:c9:aa:
                    8d:d6:fb:2f:70:c4:02:88:76:29:9c:03:4c:e2:57:
                    d5:a4:f8:e3:41:70:e4:ed:66:0e:fe:b0:8c:fa:bf:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:44:49:03:96:E2:9F:A9:91:A8:B1:E3:97:13:08:71:AB:CA:21:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c965d6b4-d6f7-394a-be55-5a3f58ca178d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d1:06:71:d2:b5:98:9a:78:6f:d8:e2:88:07:4b:8c:a3:6a:
         4c:fe:06:11:df:ee:51:d2:63:e9:2d:87:a3:87:e1:a4:6d:2b:
         68:23:13:4c:64:88:1e:a9:5b:77:52:ce:d0:20:75:d1:41:d4:
         4d:2a:3e:c0:e8:24:77:f7:85:e4:59:56:a2:21:e2:b8:24:d1:
         7f:10:69:85:4f:e0:f9:4f:d3:09:fc:64:80:a5:c6:7a:6c:0c:
         82:1a:60:5c:8a:76:52:35:de:13:1e:b8:0a:de:77:f2:fe:10:
         5d:5c:b6:75:0d:20:73:ed:54:8e:2f:b4:f1:67:08:54:58:72:
         46:ff:c2:2a:56:97:0e:53:e9:99:84:46:75:a1:1a:9a:1b:38:
         94:d8:b3:2d:24:46:6b:f4:f2:49:e4:c4:07:9b:fb:ae:05:04:
         f0:74:ea:c0:18:c8:80:46:63:c6:bd:63:62:df:1d:96:12:f3:
         7a:83:bc:14:29:ec:c2:5b:8a:b9:7a:2e:bc:b5:01:b1:aa:2d:
         84:81:01:11:57:37:02:ae:d3:b4:8f:e3:15:5b:6b:fb:9c:9f:
         44:8b:1e:da:32:e6:f3:d5:ac:5e:1c:a8:a5:e0:28:92:1e:d3:
         17:68:23:35:2f:c4:01:e2:23:a3:7a:6d:1b:5f:d4:4a:95:e2:
         aa:c5:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:41:19 2025 by rpki-client